High-speed network device monitoring based on NDIS IMD
基于NDIS中间层驱动的高速网络设备监测技术

Traditional application layer based network interface card( NIC) method became inefficient in real-time and accu-rate high-speed NIC monitoring. With the analysis of network driver interface specification( NDIS) and packet filtering under Windows platform, the paper proposed an NIC independent high-speed network and monitoring method based on NDIS. The NIC monitor was implemented with application layer module and the driver layer ones. The monitor is capable of monitor multi-ple NICS simultaneously and accurately. Its main characteristic is analyzing and processing all the packets in the kernel layer.